CVE-2006-4218

Published: Aug 17, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.

Affected (10)

Products: Zen Cart: Zen Cart

Zen Cart

1 product

Zen Cart

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Zen Cart Zen Cart	Version 1.2.0d
Zen Cart Zen Cart	Version 1.2.1_patch1
Zen Cart Zen Cart	Version 1.2.1d
Zen Cart Zen Cart	Version 1.2.2d
Zen Cart Zen Cart	Version 1.2.3d
Zen Cart Zen Cart	Version 1.2.4.1
Zen Cart Zen Cart	Version 1.2.4d
Zen Cart Zen Cart	Version 1.2.5d
Zen Cart Zen Cart	Version 1.2.6d
Zen Cart Zen Cart	Version 1.3.0.2